Proposed British Digital Information & Smart Data Bill

The new UK government used the recent King’s Speech upon the opening of Parliament to announce a proposal for a new Digital Information and Smart Data Bill (the “Bill”). 
 
The proposed Bill builds on the legacy of the Data Protection and Digital Innovation Bill (“DPDI Bill”) that was discussed extensively in the previous Parliamentary session (but which failed to become law prior to the dissolution of Parliament prior to the July 2024 UK general election) by intending to lay a baseline for a new era of data governance within the UK. 

Background

The Bill follows on the heels of the DPDI Bill, which fell away in the parliamentary wash-up prior to the general election. The DPDI intended to update the UK’s data protection framework, including establishing a statutory regime for Smart Data and Digital ID (being digital identity verification frameworks). The DPDI Bill had received wide-ranging legislative scrutiny prior in the previous parliamentary session and was anticipated to become law. 

Accordingly, the proposed Bill will amend and update the UK’s data protection regime, although many of the concepts that the Bill is likely to cover are taken directly from the defunct DPDI Bill. The key aspects that are to be covered in the Bill are set out below. 

Digital Verification Services

As originally proposed in the DPDI Bill, the Bill will seek to establish digital verification services in the UK, empowering individuals and businesses to embrace secure digital identities. This is intended to create added convenience in everyday life such as assisting with age verification checks, pre-employment checks and moving house, and have broad applicability across a range of sectors. Digital identities are expected to foster economic growth through adding efficiency to common time-consuming processes. 

National Underground Asset Register (NUAR)

The Bill also introduces the NUAR; a digital map intended to revolutionise infrastructure management by providing planners, operators and engineers with instant access to data on the pipes, cables and other network assets functioning underground. This is intended to enable efficient maintenance, repair and operation of such items.  

Smart Data Schemes: Unlocking Insights Across Sectors

Smart Data Schemes will be introduced through the Bill, which enable the secure sharing of customer data through authorised third party providers. This puts forward a wide potential of opportunities, such as seamless financial management across a range of customer accounts. 

Revising The Digital Economy Act 

The Bill will strengthen public services through revisions to the Digital Economy Act, permitting the Government to share data about businesses that use public services. One of the ultimate intentions here is to eventually move to an electronic system for birth and death registrations, thus streamlining and developing efficiencies in this area. 

Strengthening The ICO

Under the Bill, the ICO (the UK’s data protection regulator) will receive enhanced regulatory powers, which will come alongside the clarification of data laws that are currently obstructing the safe development and deployment of new technologies. 

Who Will The Bill Affect?

The key businesses affected by the Bill will be those operating in the digital verification and identity sector, or users of these services (for example organisations in the financial services sector). The developments put forward by the Bill will act as a core foundation for establishing and regulating digital identity verification technologies within the UK.

The Smart Data Schemes proposed by the Bill will act as a legal backbone for data portability programmes, and will particularly be useful for those working in open banking through the enhancement of customer data with contextual ‘business’ data, thus improving decision making in the open banking landscape. 

Key Implications

If enacted in line with the Government’s announced intentions, the Bill will be a pivotal move for the UK’s data protection landscape, particularly in respect of its reforms around Digital Verification Service (the process of confirming an online identity). The King’s Speech indicated that the government estimates these reforms to produce £600 million in economic benefit annually. 

The Bill is intended to nurture and develop the implementation of digital technologies within the UK, thus boosting the UK’s reputation as a global leader in respect of technological development and related legislative provisions. Further developments and insights on the Bill will be revealed in the coming months and potentially-affected businesses should be alive to this evolution.

David Varney is Partner at independent UK law firm Burges Salmon  

Image: 

You Might Also Read: 

Taming Aggressive Algorithms:


If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Student Who Sold Cyber Attack Software Is Jailed
The CrowdStrike Incident Means Companies Must Review Their Cloud Strategies »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Waterfall Security Solutions

Waterfall Security Solutions

Waterfall Security is focused on protecting critical infrastructure and industrial control systems from remote online cyber attacks,

Hitachi ID Systems

Hitachi ID Systems

Hitachi ID Systems offers comprehensive identity management and access governance, privileged access management and password management solutions.

Sentropi

Sentropi

Sentropi is an online protection solution against charge backs, account takeovers, identity thefts and online scams.

State e-Government Agency (SEGA) - Bulgaria

State e-Government Agency (SEGA) - Bulgaria

The State e-Government Agency (SEGA) is responsible for matters relating to electronic governance in Bulgaria.

NextVision

NextVision

NextVision is a Cybersecurity and Technology company offering a range of solutions and services for Security, Compliance and IT Infrastructure Management.

Lithuanian National Accreditation Bureau

Lithuanian National Accreditation Bureau

Lithuanian National Accreditation Bureau is the national accreditation body for Lithuania. The directory of members provides details of organisations offering certification services for ISO 27001.

DFI

DFI

DFI is a global leading provider of high-performance computing technology across multiple embedded industries.

Plug and Play Tech Center

Plug and Play Tech Center

Plug and Play is the ultimate innovation platform, bringing together the best startups and the world’s largest corporations.

24By7Security

24By7Security

24By7Security are Cybersecurity & Compliance Specialists with extensive hands on experience helping businesses build a defensive IT Infrastructure against all cyber security threats.

Datacentrix

Datacentrix

Datacentrix provides end-to-end cybersecurity services for the operational technology (OT) and IT environments to monitor, assess and defend our customers' information assets.

Alias Robotics

Alias Robotics

Alias Robotics is a robot cyber security company. We deliver cyber security solutions for robots and robot components.

Motorola Solutions

Motorola Solutions

Motorola Solutions build mission-critical services, software, video and analytics, backed by secure, resilient land mobile radio communications.

Arkphire

Arkphire

Arkphire provide solutions across every aspect of IT to help your business perform better.

Securious

Securious

If you need to improve your cyber security or achieve cyber security accreditations, Securious provide an independent service that will identify and address your issues quickly and efficiently.

Secure Blink

Secure Blink

Secure Blink provides automated application and API security solutions that empower developers and security engineers to protect critical assets from exploitation.

Vortacity Cyber

Vortacity Cyber

Vortacity is a boutique cybersecurity provider specializing in associations, nonprofits, and mission-based organizations.